Trojan

Trojan-Downloader.Win32.Tovkater.csgg (file analysis)

Malware Removal

The Trojan-Downloader.Win32.Tovkater.csgg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Downloader.Win32.Tovkater.csgg virus can do?

  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Behavior consistent with a dropper attempting to download the next stage.
  • Anomalous binary characteristics

Related domains:

midnigntstranger.top
backverge.top

How to determine Trojan-Downloader.Win32.Tovkater.csgg?


File Info:

crc32: C33581B4
md5: 0f414c64be5977e2002c554a8d74d8ad
name: 0F414C64BE5977E2002C554A8D74D8AD.mlw
sha1: 5bbae2a8d11e1df38bf5e3c1edbd7aea1b0fe4d4
sha256: df89852b752159d97de4c4bf78d5468b3fc7f042f38b728ee5fe9307595ee3ae
sha512: ac0858c45d186758f5734f51420eede647e8bbba94613ce63da4ab86b2e7e5fddda2be1025c8f1ce68aeb0671cb1167745915b34096c78dde215f51a51c31b1e
ssdeep: 24576:ZaozQ8gAOSWlhyLjA7d0OJj2/97/9nLJiyqC+CAkCox97Y4crflhi79wVkuJYO:iNSeYY7SOJjuD8yq77kX/rI9k7KVkul
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Trojan-Downloader.Win32.Tovkater.csgg also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0051918e1 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.InstallMonster.2550
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Multi
ALYacTrojan.GenericKD.46479843
CylanceUnsafe
ZillyaAdware.DLBoost.Win32.3411
SangforTrojan.Win32.Tovkater.IL
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 0051918e1 )
Cybereasonmalicious.4be597
CyrenW32/Tovkater.W.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32multiple detections
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Dropper.Tovkater-6646893-0
KasperskyTrojan-Downloader.Win32.Tovkater.csgg
BitDefenderTrojan.GenericKD.46479843
NANO-AntivirusTrojan.Win32.InstallMonster.exlcxj
MicroWorld-eScanTrojan.GenericKD.46479843
TencentWin32.Trojan-downloader.Tovkater.Hfd
Ad-AwareTrojan.GenericKD.46479843
SophosMal/Generic-S
ComodoTrojWare.Win32.TrojanDownloader.Tovkater.GC@7jimpe
BitDefenderThetaGen:NN.ZexaF.34170.toJfa4gYg7f
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PEI21
McAfee-GW-EditionBehavesLike.Win32.ICLoader.tc
FireEyeGeneric.mg.0f414c64be5977e2
EmsisoftTrojan.GenericKD.46479843 (B)
AviraHEUR/AGEN.1117983
Antiy-AVLTrojan/Generic.ASMalwS.252C9B6
MicrosoftTrojan:Win32/Tovkater!rfn
ArcabitTrojan.Generic.D2C539E3
GDataNSIS.Trojan-Downloader.Tovkater.D
AhnLab-V3Downloader/Win32.Tovkater.R215698
Acronissuspicious
McAfeeArtemis!0F414C64BE59
MAXmalware (ai score=82)
VBA32Trojan.Wacatac
MalwarebytesGeneric.Trojan.Malicious.DDS
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0PEI21
YandexTrojan.Agent!U0w9SO6wpIc
SentinelOneStatic AI – Malicious PE
FortinetW32/Tovkater.IA!tr.dldr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan-Downloader.Win32.Tovkater.csgg?

Trojan-Downloader.Win32.Tovkater.csgg removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment